No I don't have /etc/shorewall/rfc1918. I started with fresh install. Now I am into fine tuning my firewall. Thank you very much for your help. I see a repeated lines of the following ? Is this because of the logmartians entry in my interfaces file ?
net eth1 detect tcpflags,routefilter,blacklist,logmartians net eth4 detect tcpflags,routefilter,blacklist,logmartians **************** LOG FILE ****************** Jan 28 13:31:55 agni kernel: martian source 255.255.255.255 from 169.254.100.100, on dev eth1 Jan 28 13:31:55 agni kernel: ll header: ff:ff:ff:ff:ff:ff:00:18:6e:7b:f5:00:08:00 Jan 28 13:32:11 agni kernel: martian source 255.255.255.255 from 169.254.100.100, on dev eth1 Jan 28 13:32:11 agni kernel: ll header: ff:ff:ff:ff:ff:ff:00:18:6e:7b:f5:00:08:00 Jan 28 13:32:18 agni kernel: martian source 169.254.100.100 from 169.254.100.100, on dev eth1 Jan 28 13:32:18 agni kernel: ll header: ff:ff:ff:ff:ff:ff:00:18:6e:7b:f5:00:08:06 Shorewall Guy wrote: > Chakravarthy Girda wrote: >> Thank you so much...Awesome..that worked like champ. All I >> did was added routeback to my "shorewall-interfaces". eth0 & vpn >> interface but your next part which is FAQ17. I have the file >> "/usr/share/shorewall/rfc1918" but >> RFC1918_STRICT=No is set in my shorewall.conf >> >> So the question is, should I still remove that file ? > > I'm confused -- you should *never* remove /usr/share/shorewall/rfc1918. > You should remove /etc/shorewall/rfc1918 unless you have a good reason > to have your own copy; most people who have an rfc1918 file in > /etc/shorewall do so because it is simply left over from an ancient > version of Shorewall. > > > ------------------------------------------------------------------------------ > This SF.net email is sponsored by: > SourcForge Community > SourceForge wants to tell your story. > http://p.sf.net/sfu/sf-spreadtheword > _______________________________________________ > Shorewall-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/shorewall-users ------------------------------------------------------------------------------ This SF.net email is sponsored by: SourcForge Community SourceForge wants to tell your story. http://p.sf.net/sfu/sf-spreadtheword _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
